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IN THE CLAIMS 

Please amend the claims to be in the form as follows: 

Claim 1 (currently amended): Method for secure data communication to transfer content 
between consumer devices, the method comprising the following steps: a) activating a 
data communication link between the devices, b) transmitting data between the devices 
for performing an authentication session (3) for authenticating the consumer devices 

wherein the authentication session (3) generates a first key characterized in that 
the method further comprises the step of: c) transmitting data between the devices for 
performing another a subsequent authentication session (4) for authenticating the 
consumer devices fh3), wherein the subsequent authentication session <4) generates a 
second key used in transferring audio or visual content 1 6}. 

Claim 2 (original): The method as claimed in claim 1 , characterized in that the method 
further comprises the step of: d) generating a link key (9) for encrypting and/or 
decrypting the data communicated over the data communication link by merging the first 
key (5) with the second key (6) using a key merge function. 

Claim 3 (previously presented): The method as claimed in claim 1 , characterized in that 
the authentication sessions arc performed independent of each other. 

Claim 4 (original): The method as claimed in claim 1, characterized in that step b) 
further comprises transmitting additional data between the devices for deciding whether 
of not to proceed with step c). 

Claim 5 (currently amended): The method as claimed in claim 1, characterized in that the 
first authentication session is an authentication session as described in the Blu e tooth 
BLUETOOTH link encryption specification* 

Claim 6 (original): The method as claimed in claim 2, characterized in that the key 
merge function has one or more of the following properties: for any two given first and 
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second keys as input in the key merge function, the link key output of the key merge 
function is uniquely specified; the number of link key output bits is constant;- if the 
second key is undefined or all zero, the link key output bits are identical to the bits of the 
first key; for auy first key, the uncertainty in the output is approximately equal to the 
uncertainty of the second key; for any second key, the uncertainty in the output is 
approximately equal to the uncertainty of the first key. 

Claim 7 (original): The method as claimed in claim 6, characterized in that the key 
merge function is a bit-wise XOR-function. 

Claim 8 (original): The method as claimed in claim 2, characterized in that the key 
merge function comprises encrypting the first key with the second key or vice versa. 

Claim 9 (previously presented): Consumer device for performing the method according 
to claim 1, die consumer device comprising means for activating a data communication 
link, means for transmitting data, authentication means for performing an authentication 
session and further authentication means for performing another authentication session. 

Claim 10 (original): The consumer device as claimed in claim 9, characterized in that the 
consumer device further comprises an Application Programmers Interface (API) for 
informing the consumer device about the protection status of another consumer device. 

Claim 1 1 (previously presented): The consumer device as claimed in claim 9, 
characterized in that the consumer device further comprises receiving means for 
receiving information, decrypting means for decrypting the information using the link 
key (9) and recording means for recording the information. 

Claim 12 (original): The consumer device as claimed in claim 9, wherein the consumer 
device is a portable device, e.g. a headphone or a walkrnan. 

Claim 13 (original); The consumer device as claimed in claim 9, wherein the consumer 
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device comprises means for performing short-range wireless data communication. 

Claim 14 (previously presented): Signal comprising data transmitted between the devices 
(1 »2) ad used in claim 1 , wherein the data is used for performing the authentication 
sessions (3,4) for authenticating the devices. 

Claim 15 (previously presented): Signal comprising a first key (5) and a second key (6) 
obtained after performing the method of claim 1 . 

Claim 16 (currently amended): Signal according to claim 15, characterized in that it 
further comprises a link key (9) for encrypting and/or decrypting &e audio or video 
content data communicated over the data communication link* the link key being 
generated by merging the first key (5) with the second key (6) using a key merge 
function. 

Claim 17 (new): The method of claim 1 wherein transferring audio or visual content 
further comprises before transferring, determining a compliance level 

Claim 18 (new): The method of claim 17 wherein determining a compliance level further 
comprises determining rights that have been placed on content to determine the 
compliance level. 

Claim 19 (new): The method of claim 1 wherein during the subsequent authentication 
session a device for downloading audio or visual content proves that it is allowed to 
download the content. 

Claim 20 (new): The method of claim 1 9 wherein during the subsequent authentication 
session the device for downloading audio or visual content is limited in terms of quality 
for content it is allowed to download in response to a result from the subsequent 
authentication session. 
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